roboto/at.asitplus.attestation.android.engine/RtgAttestationEngine

RtgAttestationEngine

sealed class RtgAttestationEngine : AndroidAttestationEngine<ParsedAttestationRecord, AuthorizationList, X509Certificate> (source)

Android attestation engine as reliable as a radioisotope thermoelectric generator (RTG). Uses the legacy attestation parser from Google, patched for resilience

Inheritors

Hardware

Software

Types

Hardware

class Hardware(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean) : RtgAttestationEngine

Software

class Software(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean) : RtgAttestationEngine

Properties

attestationRecord

open override val List<X509Certificate>.attestationRecord: ParsedAttestationRecord

certChainValidator

open override val certChainValidator: JvmCertChainValidator

trustAnchors

val trustAnchors: Collection<TrustedRoot>

Functions

verifyAndroidVersionFromAuthList

fun AuthorizationList.verifyAndroidVersionFromAuthList(versionOverride: Int?, patchLevel: PatchLevel?, verificationDate: Instant)

verifyAttestation

suspend fun verifyAttestation(certificates: List<X509Certificate>, verificationDate: Instant, expectedChallenge: ByteArray): ParsedAttestationRecord

Verifies Android Key attestation Implements in accordance with https://developer.android.com/training/articles/security-key-attestation. Checks are performed according to the properties set in the attestationConfiguration.